Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


show security flow gate protocol



Display information about temporary openings known as pinholes or gates in the security firewall for the specified protocol.


  • protocol-name —Protocol to use as a gate filter. Information about gates that use this protocol is displayed.

Possible protocols are:

  • ah—IP Security Authentication Header

  • egp—Exterior gateway protocol

  • esp—IPsec Encapsulating Security Payload

  • gre—Generic routing encapsulation

  • icmp—Internet Control Message Protocol

  • icmp6—Internet Control Message Protocol

  • igmp—Internet Group Management Protocol

  • ipip—IP over IP

  • ospf—Open Shortest Path First

  • pim—Protocol Independent Multicast

  • rsvp—Resource Reservation Protocol

  • sctp—Stream Control Transmission Protocol

  • tcp—Transmission Control Protocol

  • udp—User Datagram Protocol

  • brief | summary—Display the specified level of output.

Required Privilege Level


Output Fields

Table 1 lists the output fields for the show security flow gate protocol command. Output fields are listed in the approximate order in which they appear.

Table 1: show security flow gate protocol Output Fields

Field Name

Field Description


Range of flows permitted by the pinhole.


Tuples used to create the session if it matches the pinhole.

  • Source address and port

  • Destination address and port


Application protocol, such as UDP or TCP.


Name of the application.


Idle timeout for the pinhole.


Internal debug flags for the pinhole.


Incoming zone.

Reference count

Number of resource manager references to the pinhole.


Resource manager information about the pinhole.

Valid gates

Number of valid gates.

Pending gates

Number of pending gates.

Invalidated gates

Number of invalid gates.

Gates in other states

Number of gates in other states.

Total gates

Number of gates in total.

Sample Output

show security flow gate protocol brief

show security flow gate protocol summary

Release Information

Command introduced in Junos OS Release 10.2.